mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-07-20 08:33:03 +02:00
- send status code 403 when attempt to enter a user comment, but comments are disabled
- don't increase hit count when a comment is posted - remove the check of user ip agains spamhaus.org when a comment is entered (my conclusion is that is useless) git-svn-id: http://piwigo.org/svn/trunk@2155 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
@@ -30,7 +30,7 @@
|
||||
function get_comment_post_key($image_id)
|
||||
{
|
||||
global $conf;
|
||||
|
||||
|
||||
$time = time();
|
||||
|
||||
return sprintf(
|
||||
@@ -68,21 +68,10 @@ function user_comment_check($action, $comment)
|
||||
{
|
||||
$link_count++;
|
||||
}
|
||||
|
||||
|
||||
if ( $link_count>$conf['comment_spam_max_links'] )
|
||||
return $my_action;
|
||||
|
||||
if ( isset($comment['ip']) and $conf['comment_spam_check_ip']
|
||||
and $_SERVER["SERVER_ADDR"] != $comment['ip']
|
||||
)
|
||||
{
|
||||
$rev_ip = implode( '.', array_reverse( explode('.',$comment['ip']) ) );
|
||||
$lookup = $rev_ip . '.sbl-xbl.spamhaus.org.';
|
||||
$res = gethostbyname( $lookup );
|
||||
if ( $lookup != $res )
|
||||
return $my_action;
|
||||
}
|
||||
|
||||
return $action;
|
||||
}
|
||||
|
||||
@@ -100,8 +89,8 @@ add_event_handler('user_comment_check', 'user_comment_check',
|
||||
function insert_user_comment( &$comm, $key, &$infos )
|
||||
{
|
||||
global $conf, $user;
|
||||
|
||||
$comm = array_merge( $comm,
|
||||
|
||||
$comm = array_merge( $comm,
|
||||
array(
|
||||
'ip' => $_SERVER['REMOTE_ADDR'],
|
||||
'agent' => $_SERVER['HTTP_USER_AGENT']
|
||||
@@ -161,7 +150,7 @@ SELECT COUNT(*) AS user_exists
|
||||
{
|
||||
$comment_action='reject';
|
||||
}
|
||||
|
||||
|
||||
if ($comment_action!='reject' and $conf['anti-flood_time']>0 )
|
||||
{ // anti-flood system
|
||||
$reference_date = time() - $conf['anti-flood_time'];
|
||||
@@ -192,7 +181,7 @@ INSERT INTO '.COMMENTS_TABLE.'
|
||||
NOW(),
|
||||
"'.($comment_action=='validate' ? 'true':'false').'",
|
||||
'.($comment_action=='validate' ? 'NOW()':'NULL').',
|
||||
'.$comm['image_id'].'
|
||||
'.$comm['image_id'].'
|
||||
)
|
||||
';
|
||||
|
||||
|
||||
Reference in New Issue
Block a user